$ rpki-client -vvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft File: khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json) Hash identifier: 1380aQ8FYcWw3zp3qc1u3dNJRRyD2wdrKRpqeSDPUVU= Subject key identifier: A1:D0:D1:2C:44:F4:F9:FE:83:49:3C:5B:A7:0F:B3:FB:E2:27:3B:E4 Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 Certificate issuer: /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft Manifest number: 0475 Signing time: Wed 29 Jul 2026 00:52:23 +0000 Manifest this update: Wed 29 Jul 2026 00:52:23 +0000 Manifest next update: Wed 05 Aug 2026 00:52:23 +0000 Files and hashes: 1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: utFxfsxGsFlRsbvKz2LPKGqaLG5HFdXkeUl5x2Wvpe0=) 2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: I3945a68aAj4Bezh1bF6xRl/WpfQZcBM/2Xudp6szlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Validity Not Before: Jul 29 00:52:23 2026 GMT Not After : Aug 5 00:52:23 2026 GMT Subject: CN=6a694ec7-bd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:8e:16:52:f4:07:ce:28:83:bd:27:6e:dc: e7:ac:6f:53:61:0c:41:39:0f:09:0c:8e:e5:04:a7: de:44:83:85:36:43:4e:98:ab:03:fb:52:08:1e:3c: bc:ab:9a:1a:9a:3a:4e:25:40:43:28:52:ed:3b:9e: 96:cd:cb:95:5b:d2:4e:84:7e:69:4f:8a:af:4b:8d: 3f:9c:02:ed:fe:15:d4:09:9c:68:65:5b:2b:d8:d0: 6d:87:24:0f:f9:6d:b1:08:8f:cf:5e:9c:ee:49:76: a4:fd:83:bb:17:d1:dd:26:d3:14:4a:68:38:60:6c: b4:35:04:9d:3c:16:e4:ea:82:f8:5e:75:b6:27:ef: fb:78:a6:35:5a:a8:f1:46:0b:0e:ba:78:04:15:73: 5e:53:37:f4:1e:da:bf:54:e7:57:00:9d:71:60:e2: 49:ca:47:fb:17:cf:49:d1:63:b3:00:eb:f9:67:c4: c8:59:ca:b5:2d:b8:7b:b0:91:fe:ba:a8:42:a0:d3: 62:86:3e:23:9a:b4:b4:44:e0:60:d4:ee:68:12:0d: 73:24:8c:65:ee:75:e2:17:bc:82:74:b6:01:d2:11: 13:db:7f:ad:02:ec:ee:b3:f2:6e:ca:07:2e:ec:13: b4:d0:00:1e:2e:f3:52:b3:39:5a:ba:0e:0f:40:fa: 81:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D0:D1:2C:44:F4:F9:FE:83:49:3C:5B:A7:0F:B3:FB:E2:27:3B:E4 X509v3 Authority Key Identifier: keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0d:83:58:c0:60:bc:74:ce:17:07:9c:d5:73:5d:ce:d8:56: 84:11:58:93:bd:c1:1b:5a:e9:f1:a6:fa:7a:e8:df:7e:21:c6: ec:86:8d:85:70:51:bc:bd:46:96:40:52:54:ce:d8:c7:69:1b: 2a:01:4c:c6:a0:02:08:4d:f4:0f:4e:4c:ee:d0:33:dc:68:20: 51:15:81:08:dc:56:e2:31:bf:ec:32:f1:e8:05:5c:95:91:c9: 53:e9:48:8a:c0:81:b2:23:26:e3:0d:91:fc:04:a2:bf:eb:bb: 91:49:5e:47:fe:c7:2a:e9:0c:c4:b8:2c:18:5d:47:fb:4e:c5: f1:e8:d7:a5:d2:ea:66:aa:b6:71:45:6b:bd:52:fd:0a:0f:82: ef:70:fc:a8:15:1c:2c:38:ff:72:a1:33:cc:a4:75:f1:dc:53: 20:59:6e:73:ae:0f:b5:81:36:9d:c6:de:03:9b:a1:9e:5f:b6: d0:c6:ff:56:09:bb:4c:df:18:88:d3:ab:c3:eb:3f:16:cf:b7: a9:15:0b:c5:85:8d:cc:da:9e:4a:47:a4:51:69:6f:ad:66:cf: 39:b3:1f:3d:62:43:3f:a5:9a:f8:ee:77:e9:bb:0d:8d:56:97: 0f:d8:45:f4:6d:a9:4e:78:c7:f2:2f:c3:a0:bc:a1:8f:f5:78: 2c:95:3e:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdCMzkxMTAvBgNVBAUTKDkyMTc0MTg0NTlBOENBOTIyRTBENjZBM0NCQUE0MDY3 MjBDQjQ4OTAwHhcNMjYwNzI5MDA1MjIzWhcNMjYwODA1MDA1MjIzWjAYMRYwFAYD VQQDEw02YTY5NGVjNy1iZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27mOFlL0B84og70nbtznrG9TYQxBOQ8JDI7lBKfeRIOFNkNOmKsD+1IIHjy8 q5oamjpOJUBDKFLtO56WzcuVW9JOhH5pT4qvS40/nALt/hXUCZxoZVsr2NBthyQP +W2xCI/PXpzuSXak/YO7F9HdJtMUSmg4YGy0NQSdPBbk6oL4XnW2J+/7eKY1Wqjx RgsOungEFXNeUzf0Htq/VOdXAJ1xYOJJykf7F89J0WOzAOv5Z8TIWcq1Lbh7sJH+ uqhCoNNihj4jmrS0ROBg1O5oEg1zJIxl7nXiF7yCdLYB0hET23+tAuzus/Juygcu 7BO00AAeLvNSszlaug4PQPqB2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHQ0SxE 9Pn+g0k8W6cPs/viJzvkMB8GA1UdIwQYMBaAFJIXQYRZqMqSLg1mo8uqQGcgy0iQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0IzOS9BNzU5OUQ3QUEw MzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lwSXVEV2FqeTZwQVp5RExT SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toZEJoRm1veXBJdURXYWp5NnBBWnlETFNKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0IzOS9BNzU5OUQ3QUEwMzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lw SXVEV2FqeTZwQVp5RExTSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALg2DWMBgvHTOFwec1XNdzthWhBFYk73BG1rp8ab6eujffiHG7IaNhXBRvL1G lkBSVM7Yx2kbKgFMxqACCE30D05M7tAz3GggURWBCNxW4jG/7DLx6AVclZHJU+lI isCBsiMm4w2R/ASiv+u7kUleR/7HKukMxLgsGF1H+07F8ejXpdLqZqq2cUVrvVL9 Cg+C73D8qBUcLDj/cqEzzKR18dxTIFluc64PtYE2ncbeA5uhnl+20Mb/Vgm7TN8Y iNOrw+s/Fs+3qRULxYWNzNqeSkekUWlvrWbPObMfPWJDP6Wa+O536bsNjVaXD9hF 9G2pTnjH8i/DoLyhj/V4LJU+OQ== -----END CERTIFICATE-----Generated at Wed Jul 29 05:44:50 2026 by rpki-client